DNS Help - probably easy - mental block heh

Discussion in 'Network Infrastructure' started by passmeplz, Jan 23, 2007.

  1. passmeplz

    passmeplz New Member

    9
    0
    1
    While going over some practice sims i came across a dns one and i forgot how you make a dns server only respond to requests from the private network ?

    thanks for any help you can give :)
     
  2. zimbo
    Honorary Member

    zimbo Petabyte Poster

    5,215
    99
    181
    In the interfaces tab in the DNS server make sure that there is only one IP that the DNS server is listening to and that the IP of the Network...

    Eg your DNS Server has an IP 192.168.1.10 --> if you would what i said above, the DNS would only "dish out" records on that network.
     
    Certifications: B.Sc, MCDST & MCSA
    WIP: M.Sc - Computer Forensics
  3. passmeplz

    passmeplz New Member

    9
    0
    1
    Thanks for the reply zimbo. So instead of having the dot in the All Ip addresses option i would put it in the only the only the following Ip addresses option and put in the Ip address of the private network card and not the one connected to the net ?

    Cheers for your help
     
  4. zimbo
    Honorary Member

    zimbo Petabyte Poster

    5,215
    99
    181
    Certifications: B.Sc, MCDST & MCSA
    WIP: M.Sc - Computer Forensics
  5. passmeplz

    passmeplz New Member

    9
    0
    1
    Cheers that infos really helpful - all layed out nicely in my head now heh.
    I have another question you may be able to help me with if its not too much trouble.
    The question asks if you make a reverse lookup for a subnet how do make sure its stored in active directory and updates are secure. Now am i right in thinking that it has to be an Active Directory-integrated zone to be able to use secure updates , or could you put the dot in "Do not allow dynamic updates" which would force you to update the records manually but that would be secure ...
    Thanks for the help
     
  6. zimbo
    Honorary Member

    zimbo Petabyte Poster

    5,215
    99
    181
    hang on...where you getting this sim from mate?
     
    Certifications: B.Sc, MCDST & MCSA
    WIP: M.Sc - Computer Forensics
  7. passmeplz

    passmeplz New Member

    9
    0
    1
    not sim sorry was a question - edited my post for correctness
     
  8. zimbo
    Honorary Member

    zimbo Petabyte Poster

    5,215
    99
    181
    is this from some testing software or something?
     
    Certifications: B.Sc, MCDST & MCSA
    WIP: M.Sc - Computer Forensics
  9. passmeplz

    passmeplz New Member

    9
    0
    1
    Yep , practice questions. Building up to take the test soon.
     
  10. passmeplz

    passmeplz New Member

    9
    0
    1
    So do you have to have an active directory integrated zone to use secure updates ?
     
  11. Sparky
    Highly Decorated Member Award 500 Likes Award

    Sparky Zettabyte Poster Moderator

    10,718
    543
    364
    These questions look very '70-291' :hhhmmm
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) MS-900 AZ-900 Security+ Network+ A+
    WIP: Microsoft Certs
  12. passmeplz

    passmeplz New Member

    9
    0
    1
    Its a practice test question for 70-291
     
  13. Sparky
    Highly Decorated Member Award 500 Likes Award

    Sparky Zettabyte Poster Moderator

    10,718
    543
    364
    Just out of interest where did you get the questions from?
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) MS-900 AZ-900 Security+ Network+ A+
    WIP: Microsoft Certs
  14. zimbo
    Honorary Member

    zimbo Petabyte Poster

    5,215
    99
    181
    Ok try change the question because due to copyright you cant post the exact question on the forum. I think you ok so far so just keep it in mind... :biggrin

    If you create an Active directory integrated zone you can then allow secure updates... does that answe you question?
     
    Certifications: B.Sc, MCDST & MCSA
    WIP: M.Sc - Computer Forensics
  15. zimbo
    Honorary Member

    zimbo Petabyte Poster

    5,215
    99
    181
    You sure you want to know? :biggrin :biggrin
     
    Certifications: B.Sc, MCDST & MCSA
    WIP: M.Sc - Computer Forensics
  16. passmeplz

    passmeplz New Member

    9
    0
    1
    Downloaded them from some free test engine website , has like 10 questions and you get 25 mins to do them. You have to pay for the full version but im low on money hehe , think its from freedownloadscenter.com.
     
  17. passmeplz

    passmeplz New Member

    9
    0
    1
    thanks zimbo , so i was right in thinking the only way you can have a zone with secure updates is if it is an active directory integrated zone ?
     
  18. Sparky
    Highly Decorated Member Award 500 Likes Award

    Sparky Zettabyte Poster Moderator

    10,718
    543
    364
    Probably best to fire up a test server and create some zones and get to know how DNS works on a Windows 2003 server, it will help you out when you have to configure a server for real. 8)
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) MS-900 AZ-900 Security+ Network+ A+
    WIP: Microsoft Certs
  19. zimbo
    Honorary Member

    zimbo Petabyte Poster

    5,215
    99
    181
    I think sparky said it all...
     
    Certifications: B.Sc, MCDST & MCSA
    WIP: M.Sc - Computer Forensics
  20. r.h.lee

    r.h.lee Gigabyte Poster

    1,011
    52
    105
    passmeplz,

    Which kind of Microsoft Domain?
    • Windows 2000 based
    • Windows 2003 based
    • Other
     
    Certifications: MCSE, MCP+I, MCP, CCNA, A+
    WIP: CCDA

Share This Page

Loading...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.